better-outcomes-registry-&-network-born-ontario

The Ontario birth registry, Better Outcomes Registry & Network (BORN), reported a data breach affecting almost 3.4 million persons.

The organization initiated an inquiry into the breach as soon as they became aware of the security problem and contacted the appropriate authorities, including the Ontario Provincial Police and the Information and Privacy Commissioner (IPC) of Ontario.

The company acknowledged that it was a victim of the widespread hacking campaign launched by the Clop ransomware group against Progress MOVEit transfer systems.

In order to reduce the threat, safeguard its infrastructure, and determine the extent of the attack, BORN Ontario contacted cybersecurity specialists.

Source: https://securityaffairs.com/151475/data-breach/born-ontario-data-breach.html

TPRM report: https://scoringcyber.rankiteo.com/company/better-outcomes-registry-&-network-born-ontario

"id": "bet04421023",
"linkid": "better-outcomes-registry-&-network-born-ontario",
"type": "Breach",
"date": "09/2023",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization’s existence"

{'affected_entities': [{'customers_affected': 3400000,
                        'industry': 'Healthcare',
                        'location': 'Ontario, Canada',
                        'name': 'Better Outcomes Registry & Network (BORN)',
                        'type': 'Government Agency'}],
 'attack_vector': 'Ransomware',
 'data_breach': {'number_of_records_exposed': 3400000,
                 'type_of_data_compromised': ['Personal Information']},
 'description': 'The Ontario birth registry, Better Outcomes Registry & '
                'Network (BORN), reported a data breach affecting almost 3.4 '
                'million persons. The organization initiated an inquiry into '
                'the breach as soon as they became aware of the security '
                'problem and contacted the appropriate authorities, including '
                'the Ontario Provincial Police and the Information and Privacy '
                'Commissioner (IPC) of Ontario. The company acknowledged that '
                'it was a victim of the widespread hacking campaign launched '
                'by the Clop ransomware group against Progress MOVEit transfer '
                'systems. In order to reduce the threat, safeguard its '
                'infrastructure, and determine the extent of the attack, BORN '
                'Ontario contacted cybersecurity specialists.',
 'impact': {'data_compromised': ['Personal Information']},
 'motivation': 'Data Theft',
 'ransomware': {'ransomware_strain': 'Clop'},
 'regulatory_compliance': {'regulatory_notifications': 'Information and '
                                                       'Privacy Commissioner '
                                                       '(IPC) of Ontario'},
 'response': {'law_enforcement_notified': 'Ontario Provincial Police',
              'third_party_assistance': 'Cybersecurity specialists'},
 'threat_actor': 'Clop ransomware group',
 'title': 'BORN Ontario Data Breach',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Progress MOVEit transfer systems'}